Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: BSOD 0x000000FC & 0x00000050 ntoskrnl.exe (74ec0 & 76e80)+ Win32k.sys

28 Feb 2015   #1
Artofsteal

Windows 7 Home Premium x64
 
 
BSOD 0x000000FC & 0x00000050 ntoskrnl.exe (74ec0 & 76e80)+ Win32k.sys

Greetings Seven Forums.
I've been encountering constant BSODs consisting of page fault in nonpaged area and attempted execute of non executable memory! I have run memtest for 24 hours without errors. Additionally, I am running on no overclocks. Chkdsk found no errors in my hard drive, a Western Digital, either. I have run malwarebytes and kaspersky without any reports either! Any assistance is greatly appreciated!
Using WinDBG, I get

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\022015-245514-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18717.amd64fre.win7sp1_gdr.150113-1808
Machine Name:
Kernel base = 0xfffff800`03860000 PsLoadedModuleList = 0xfffff800`03aa4890
Debug session time: Thu Feb 19 20:00:27.509 2015 (UTC - 6:00)
System Uptime: 0 days 0:16:55.306
Loading Kernel Symbols
...............................................................
................................................................
.........................................
Loading User Symbols
Loading unloaded module list
..................................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck FC, {fffff8a004e3c897, a1200001a65c8943, fffff8800e5d0910, 2}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+44dfc )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)
An attempt was made to execute non-executable memory. The guilty driver
is on the stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffff8a004e3c897, Virtual address for the attempted execute.
Arg2: a1200001a65c8943, PTE contents.
Arg3: fffff8800e5d0910, (reserved)
Arg4: 0000000000000002, (reserved)

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0xFC

PROCESS_NAME: chrome.exe

CURRENT_IRQL: 0

TRAP_FRAME: fffff8800e5d0910 -- (.trap 0xfffff8800e5d0910)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=fffffa8009aa1060 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8a004e3c897 rsp=fffff8800e5d0aa0 rbp=fffff8800e5d0b60
r8=0000000000000000 r9=0000000000000000 r10=fffff8800e5d0070
r11=fffffa8009aa1060 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
fffff8a0`04e3c897 0000 add byte ptr [rax],al ds:000f:00000000`00000000=??
Resetting default scope

LAST_CONTROL_TRANSFER: from fffff80003953b78 to fffff800038d4ec0

STACK_TEXT:
fffff880`0e5d07a8 fffff800`03953b78 : 00000000`000000fc fffff8a0`04e3c897 a1200001`a65c8943 fffff880`0e5d0910 : nt!KeBugCheckEx
fffff880`0e5d07b0 fffff800`038d2fee : 00000000`00000008 fffff8a0`04e3c897 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x44dfc
fffff880`0e5d0910 fffff8a0`04e3c897 : 00000000`00000000 00000000`0033e930 00000000`00000000 ffffffff`fff5c6d0 : nt!KiPageFault+0x16e
fffff880`0e5d0aa0 00000000`00000000 : 00000000`0033e930 00000000`00000000 ffffffff`fff5c6d0 00000000`0033fd20 : 0xfffff8a0`04e3c897


STACK_COMMAND: kb

FOLLOWUP_IP:
nt! ?? ::FNODOBFM::`string'+44dfc
fffff800`03953b78 cc int 3

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt! ?? ::FNODOBFM::`string'+44dfc

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 54b5f6ff

FAILURE_BUCKET_ID: X64_0xFC_nt!_??_::FNODOBFM::_string_+44dfc

BUCKET_ID: X64_0xFC_nt!_??_::FNODOBFM::_string_+44dfc

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)
An attempt was made to execute non-executable memory. The guilty driver
is on the stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffff8a004e3c897, Virtual address for the attempted execute.
Arg2: a1200001a65c8943, PTE contents.
Arg3: fffff8800e5d0910, (reserved)
Arg4: 0000000000000002, (reserved)

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0xFC

PROCESS_NAME: chrome.exe

CURRENT_IRQL: 0

TRAP_FRAME: fffff8800e5d0910 -- (.trap 0xfffff8800e5d0910)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=fffffa8009aa1060 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8a004e3c897 rsp=fffff8800e5d0aa0 rbp=fffff8800e5d0b60
r8=0000000000000000 r9=0000000000000000 r10=fffff8800e5d0070
r11=fffffa8009aa1060 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
fffff8a0`04e3c897 0000 add byte ptr [rax],al ds:000f:00000000`00000000=??
Resetting default scope

LAST_CONTROL_TRANSFER: from fffff80003953b78 to fffff800038d4ec0

STACK_TEXT:
fffff880`0e5d07a8 fffff800`03953b78 : 00000000`000000fc fffff8a0`04e3c897 a1200001`a65c8943 fffff880`0e5d0910 : nt!KeBugCheckEx
fffff880`0e5d07b0 fffff800`038d2fee : 00000000`00000008 fffff8a0`04e3c897 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x44dfc
fffff880`0e5d0910 fffff8a0`04e3c897 : 00000000`00000000 00000000`0033e930 00000000`00000000 ffffffff`fff5c6d0 : nt!KiPageFault+0x16e
fffff880`0e5d0aa0 00000000`00000000 : 00000000`0033e930 00000000`00000000 ffffffff`fff5c6d0 00000000`0033fd20 : 0xfffff8a0`04e3c897


STACK_COMMAND: kb

FOLLOWUP_IP:
nt! ?? ::FNODOBFM::`string'+44dfc
fffff800`03953b78 cc int 3

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt! ?? ::FNODOBFM::`string'+44dfc

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 54b5f6ff

FAILURE_BUCKET_ID: X64_0xFC_nt!_??_::FNODOBFM::_string_+44dfc

BUCKET_ID: X64_0xFC_nt!_??_::FNODOBFM::_string_+44dfc

Followup: MachineOwner
---------


My System SpecsSystem Spec
.
02 Mar 2015   #2
Artofsteal

Windows 7 Home Premium x64
 
 

Just got done running memtest on each stick individually; no errors were found.
My System SpecsSystem Spec
08 Mar 2015   #3
Artofsteal

Windows 7 Home Premium x64
 
 

Just got another 0x0FC BSOD that blamed nwifi.sys+ff7767b8. For some reason, BSODS prior to this,(from like 2/19 - 3/8), did not create any minidumps...
Any suggestions?
My System SpecsSystem Spec
.

08 Mar 2015   #4
Golden
Microsoft MVP

Windows 7 Ult. x64
 
 

How many passes of MemTest86+ did you run?

Please do the following:

Run Driver Verifier for 24 hours or the occurrence of the next crash, whichever is earlier.
Driver Verifier - Enable and Disable

Driver Verifier will cause your computer to run very sluggishly - this is normal. What it is trying to do is force your system to BSOD and isolate the offending driver/s. When it does, reboot, disable driver verifier, reboot as normal and upload the new dmp file/s here.

I recommend creating a system restore point before turning on driver verifier:
System Restore Point - Create

If your system fails to boot to desktop once driver verifier is enabled, turn it off by booting into Safe Mode:
Safe Mode
My System SpecsSystem Spec
08 Mar 2015   #5
Artofsteal

Windows 7 Home Premium x64
 
 

Quote   Quote: Originally Posted by Golden View Post
How many passes of MemTest86+ did you run?

Please do the following:

Run Driver Verifier for 24 hours or the occurrence of the next crash, whichever is earlier.
Driver Verifier - Enable and Disable

Driver Verifier will cause your computer to run very sluggishly - this is normal. What it is trying to do is force your system to BSOD and isolate the offending driver/s. When it does, reboot, disable driver verifier, reboot as normal and upload the new dmp file/s here.

I recommend creating a system restore point before turning on driver verifier:
System Restore Point - Create

If your system fails to boot to desktop once driver verifier is enabled, turn it off by booting into Safe Mode:
Safe Mode
Hello! Thanks for the reply :). I have run probably a total of 20 runs now. I run, I think, 6 per 24 hours.
I will turn on driver verifier right away!
My System SpecsSystem Spec
08 Mar 2015   #6
Golden
Microsoft MVP

Windows 7 Ult. x64
 
 

We usually recommend a minimum of 8 consecutive passes, but lets see what DV spits out.
My System SpecsSystem Spec
09 Mar 2015   #7
Artofsteal

Windows 7 Home Premium x64
 
 

Quote   Quote: Originally Posted by Golden View Post
We usually recommend a minimum of 8 consecutive passes, but lets see what DV spits out.
No Bsod yet. Should I enable or disable "Force Pending I/O Requests", because there is one driver verifier tutorial, which are all from sevenforums, from Jonathan_King which states I should enable, while Capt. Jack Sparrow says I should disable it.
As of now, with all but "Force Pending I/O Requests" and "Low Resource Simulation", there is no BSODS.
My System SpecsSystem Spec
10 Mar 2015   #8
Golden
Microsoft MVP

Windows 7 Ult. x64
 
 

Try JKing's first. If you don't get a BSOD within 24hrs, then try Capt jack's.
My System SpecsSystem Spec
10 Mar 2015   #9
Artofsteal

Windows 7 Home Premium x64
 
 

Quote   Quote: Originally Posted by Golden View Post
Try JKing's first. If you don't get a BSOD within 24hrs, then try Capt jack's.
I am still only getting faults in nonpaged areas. Probably gonna give my ram chips to a friend tomorrow to test run them and see if they cause any blue screens. They are corsair, so they is life time warranty, thankfully. Not sure if this helps, but now my computer is now getting stuck on the phase of "initializing disk for crash dump."
My System SpecsSystem Spec
11 Mar 2015   #10
Golden
Microsoft MVP

Windows 7 Ult. x64
 
 

That might point to a disk issue. Test it using the DOS version of SeaTools:
SeaTools for DOS and Windows - How to Use

It might also be worth running 8 consecutive passes of MemTest86+ now.
My System SpecsSystem Spec
Reply

 BSOD 0x000000FC & 0x00000050 ntoskrnl.exe (74ec0 & 76e80)+ Win32k.sys




Thread Tools




Similar help and support threads
Thread Forum
BSOD 0x00000050/0x0000007F - ntoskrnl/aswSnx.sys/win32k.sys
Hello everyone, Lately i have been running into several BSOD which started about a week ago and only seem to be getting worse. I got my first BSOD after installing the program Discord (voice chat program) it gave a faulty installation and a couple of hours later i got a BSOD. After restarting...
BSOD Help and Support
BSOD random most times ntoskrnl.exe+748c0 and ntoskrnl.exe+74ec0
BSOD random, probably under heavy load situations. I dont know how to do. DM log collector file attached many thanks
BSOD Help and Support
Random BSOD error driver ntoskrnl.exe (address ntoskrnl.exe+74ec0)
Hey guys so I've been getting some random BSOD errors every few days or so. I usually leave my computer on when I am at work or sleep and either when I come home or wake up my computer is off. So I turn it on and it says that the computer didn't shut down properly when I start up. I downloaded...
BSOD Help and Support
BSOD ntoskrnl.exe+74ec0 and 76e80
Hi, I'm new to this all, but am having a problem with BSOD's and it is driving me bonkers! If anyone is willing to help me out it would be greatly appreciated! here is the log info, hopefully I did this right! Thanks
BSOD Help and Support
BSOD minutes after startup win32k.sys ntoskrnl.exe Code: 0x00000050
Hi there, currently in safe mode but I'm getting a BSOD crash every few minutes after I boot my pc. If anybody could help me with this it would be very much appreciated.
BSOD Help and Support


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 19:13.
Twitter Facebook Google+